Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/OmVKcdrdoXLiQqS9LZnKrqKKj1Y.roa
File:                     OmVKcdrdoXLiQqS9LZnKrqKKj1Y.roa (raw, json)
Hash identifier:          n+5eWvqWX0xQLUEa4SfnAqZUw3QtDbKP6MSTJ21WyUA=
Subject key identifier:   3A:65:4A:71:DA:DD:A1:72:E2:42:A4:BD:2D:99:CA:AE:A2:8A:8F:56
Certificate issuer:       /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial:       1D9CC808
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/OmVKcdrdoXLiQqS9LZnKrqKKj1Y.roa
Signing time:             Fri 20 May 2022 08:56:30 +0000
ROA not before:           Fri 20 May 2022 08:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        185.116.14.0/24 maxlen: 24
                          185.116.13.0/24 maxlen: 24
                          185.116.12.0/24 maxlen: 24
                          185.116.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496814088 (0x1d9cc808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
        Validity
            Not Before: May 20 08:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a654a71dadda172e242a4bd2d99caaea28a8f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:d1:9f:69:a9:7e:d0:ed:b5:7b:75:dc:bb:
                    58:07:42:02:2f:19:6a:69:f6:bd:92:8e:95:29:ad:
                    4f:08:46:c3:5c:1a:d8:08:13:9c:36:20:e8:ed:38:
                    3e:2a:04:0a:73:8c:ee:c4:38:36:2b:83:4e:b8:46:
                    eb:d4:15:bb:f8:b6:48:07:f1:4f:9d:5a:b9:19:61:
                    1c:4f:21:77:1b:88:a6:1d:e4:92:3a:ef:82:e6:e2:
                    ca:32:04:fa:60:27:9c:66:f9:cf:31:42:4b:ec:a9:
                    a5:14:90:4f:ea:31:96:3c:ba:b6:64:89:bb:39:20:
                    2c:7f:b2:00:f1:dd:fd:0b:db:b2:5c:6b:d5:0e:20:
                    2c:7c:86:b4:cb:f0:2e:b2:e0:a1:ab:b4:1a:40:0d:
                    50:07:ab:c9:d5:05:3d:55:16:32:6c:25:a4:aa:34:
                    2e:ac:97:b2:42:99:91:93:03:65:3a:82:0b:6f:5c:
                    2f:ac:ce:29:79:8f:58:c7:f9:09:c9:bf:d5:0b:52:
                    56:18:1e:89:c2:72:43:3d:ea:9e:ff:27:b0:ca:99:
                    3e:14:ad:f1:4a:d5:24:e0:c4:b5:58:31:2e:7c:91:
                    35:80:4a:7b:1f:68:23:11:bd:81:39:9d:27:44:eb:
                    bd:d6:2e:b5:dd:16:77:00:a9:9a:6a:66:d1:07:60:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:65:4A:71:DA:DD:A1:72:E2:42:A4:BD:2D:99:CA:AE:A2:8A:8F:56
            X509v3 Authority Key Identifier:
                keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/OmVKcdrdoXLiQqS9LZnKrqKKj1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:b4:68:e9:13:7a:75:2d:2e:e5:f2:04:0f:bd:4a:2c:7f:bf:
         68:f9:bc:60:79:49:9b:d6:eb:f4:98:b0:42:e7:9e:ab:e0:2f:
         34:41:30:6f:74:b0:67:2e:9a:e3:09:1c:48:d6:67:ee:2b:b4:
         35:de:a5:13:aa:52:e0:d6:82:53:1b:74:dd:bc:e1:63:09:67:
         78:ae:49:4c:cf:1a:7f:ac:af:53:37:fd:8f:4d:b5:ae:ee:4c:
         ce:8e:ca:66:cf:30:bc:81:77:19:a5:47:01:5e:7c:d5:74:48:
         16:a5:b7:af:9f:07:3c:2f:b9:13:61:30:32:61:76:8f:e7:e2:
         99:75:e8:00:68:0a:ad:23:70:75:c3:c0:96:8b:a8:ad:ac:a0:
         9c:14:1b:92:7c:7d:62:a5:1a:9e:e2:d3:9b:a6:4d:72:01:bc:
         b2:94:e6:62:9e:58:b0:f5:2c:50:b7:de:41:48:dd:a5:5d:c3:
         8a:2b:84:6f:79:b7:4b:c3:40:37:4b:05:a7:dc:16:2b:6c:92:
         5d:0d:64:53:fa:86:06:6d:83:5a:f8:22:fc:0f:ce:f2:41:55:
         47:2c:81:51:ec:b0:79:b2:68:76:20:44:aa:e1:7a:e9:33:76:
         af:1a:01:65:b3:7c:96:77:8b:74:74:0d:25:15:bf:51:f7:0b:
         45:b8:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:53 2024 by rpki-client on console-fra.rpki-client.org